You are deploying Active Directory Domain Services $($AD DS$)$ in an Azure virtual network. Which items should you consider when it comes to availability? $($Select two.$)$

answer

Close all ports on the AD DS servers except for those necessary for authentication, authorization, and server synchronization.

Place AD DS servers in separate subnets with a Network Security Group $($NSG$)$ as a firewall.

Deploy VMs that run AD DS in two Availability Zones at the minimum.

Use standby operations master on at least one server.

Use Bitlocker or Azure disk encryption to encrypt the AD DS database disk.